open-webui vulnerabilities

CVEs whose affected-version data names the open-webui package (npm, pip). Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

open-webui vulnerabilities

Open WebUI has an IDOR vulnerability in the pin_channel_message API endpoint

Open WebUI has stored XSS via the HTML renedering view

Open WebUI has a full SSRF Vulnerability in the RAG Web Search Feature

Open WebUI's chat completion API allows tool restrictions to be bypassed

Open WebUI Vulnerable to IDOR: Retrieval API Bypasses Knowledge Base Access Controls

Open WebUI: Jupyter code execution works despite `ENABLE_CODE_EXECUTION=false` — feature gate bypassed

Open WebUI has XSS via SVG in /api/v1/channels/webhooks/{webhook_id}/profile/image

Open WebUI: shared-chat branch ignores access_type, allowing unauthorized file deletion

Open WebUI Vulnerable to SSRF via OAuth Profile Picture URL in _process_picture_url (oauth.py)

Open WebUI has a CORS misconfiguration and session validation issue

Open WebUI's Insecure Message Access Breaks Authorization

Open WebUI's Improper Authorization in Standard Channels Allows Message Updates with Read Permission

Open WebUI Arbitrary File Write, Delete via Path Traversal

Open WebUI has inconsistent authorization controls within memories API

Read-Only Open WebUI Users Can Modify Collaborative Documents via Socket.IO

Open WebUI's Ollama Model Access Control Bypass via /api/generate, /api/embed, /api/embeddings, and /api/show

Open WebUI's Model Import Overwrites Any Model Without Ownership Check

Open WebUI has stored XSS in Excel file preview

Open WebUI's Mass Assignment via Pydantic extra='allow' Allows Creating Folders in Other Users' Accounts

Open WebUI's responses passthrough endpoint lacks access control authorization

Open WebUI: Deactivated Channel Members Retain Full Access to Group/DM Channels

Open WebUI has Unauthorized File and Knowledge Base Content Access via RAG Vector Search

open-webui Vulnerable to Stored XSS via Model Description

Open WebUI has Stored XSS in Pending User Overlay via Incorrect DOMPurify Application Order

Open WebUI Missing Access Check on Channel Members Endpoint for Standard Channels

Open WebUI's Base Model Routing Bypasses Access Control via Model Chaining

Open WebUI Vulnerable to Arbitrary File Upload and Path Traversal

Open WebUI's Channel Access Grants Bypass filter_allowed_access_grants

Open WebUI has Knowledge Base Destruction and RAG Poisoning via Unauthorized Collection Overwrite

Open WebUI vulnerable to Global Knowledge Base Enumeration via knowledge-bases Meta-Collection